Overview

overview

10

Static

static

10

247b607498...a9.exe

windows7-x64

10

247b607498...a9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    79f292504e2687ff3877f5f3a8e142c6.bin

  • Size

    84KB

  • MD5

    d09312492a87da9d6a8c2ad2388ee6fb

  • SHA1

    99f1f9ab608ff6ad98a9bddd563e5cdf02851814

  • SHA256

    43961554a6d94de4a3953bd5067cff6e69da347f0bd447134f77ab9aa0b30f00

  • SHA512

    b5d3d4ad18defe79d59f59a544eaf3e7b753401d856f81ab852b820a6b173a6846f916da543c265381f24ee3ab9cc5d952a2a5d62398c26db91d17f1b059d5a3

  • SSDEEP

    1536:/jpLgATK/slu9kIjWbh56Tm/VloKcLBKB5L3SaC9zxBppReYgcb1IBa:9gAT98B6bqmrB5L39kxB/ReW1I8

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discordapp.com/api/webhooks/1209058275480445018/H-McbOnJpNYHQhHKLtNjlZha3IvLrUjGthxLuHaQ_h5rrm_C7srttGVVmosCSmH6SFWx

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79f292504e2687ff3877f5f3a8e142c6.bin
    .zip

    Password: infected

  • 247b6074981847173c995d1d0a45ebc3cd6b4cf64cbb7fc69e16b749b85023a9.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections